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CLAIMS 

1. A method of generating a key stream comprising: 

applying a cryptographic function on input values selected from a first array of 
values to generate output values; 

selecting mask values from a second array of values; and 
combining the output values with the mask values to generate a key stream 
block for the key stream; 

wherein the first and second arrays are finite. 

2. The method of claim 1 , further comprising: 
generating the second array from the first array. 

3. The method of claim 2, further comprising: 

using a linear feedback shift register (LFSR) to generate the first array, wherein 
the values of the first array correspond to the values of the LSFR states. 

4. The method of claim 3, further comprising: 
clocking the LFSR to generate the second array. 

5. The method of claim 3, wherein each value comprises of one or more words, 
each of two or more bytes and wherein using the LFSR to generate the first array 
comprises: 

copying words of a key and words of an initialization vector into the LFSR; 
performing a byte-wise substitution on at least one byte of a word in the LFSR 
to generate a corresponding replacement word in the LFSR; 

mixing at least two bytes of a replacement word in the LFSR; and 
mixing at least two words in the LFSR to generate the first array. 

6. The method of claim 1 , further comprising: 

applying the cryptographic function on updated input values selected from an 
updated first array of values to generate updated output values; 

selecting updated mask values from an updated second array of values; and 
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combining the updated output values with the updated mask values to generate a 
new key stream block for the key stream. 

7. The method of claim 6, further comprising: 

setting the values of the first array as the values of first linear feedback shift 
register (LFSR) states; and 

clocking the LSFR to generate the updated first array. 

8. The method of claim 6, further comprising: 

setting the values of the second array as the values of second LFSR states; and 
clocking the LSFR to generate the updated second array. 

9. The method of claim 1, wherein the number of input values and the number of 
output values are equal. 

10. The method of claim 1, wherein the first and second array each comprises 
seventeen values. 

11. The method of claim 1, wherein each value comprises of one or more words and 
wherein each word comprises two or more bytes. 

12. The method of claim 1 1, wherein applying the cryptographic function 
comprises: 

performing a byte-wise substitution of at least one byte of an input value to 
generate primary intermediate values; and 

mixing at least two bytes of a primary intermediate value to generate a 
secondary intermediate value to generate the output values. 

13. The method of claim 12, wherein performing the byte-wise substitution of at 
least one byte comprises: 

performing a nonlinear substitution of the at least one byte. 

14. The method of claim 13, wherein performing the nonlinear substitution of the at 
least one byte comprises: 
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performing a key-dependent Sbox substitution on the at least one byte. 

15. The method of claim 14, wherein performing the key-dependent Sbox 
substitution of the at least one byte comprises: 

combining a first key byte with the at least one byte to generate a first combined 
byte; and 

substituting the first combined byte with a byte value from a pre-determined 

array. 

16. The method of claim 15, further comprising: 

generating the first key byte based on a secret key of one or more words. 

17. The method of claim 16, wherein generating the first key comprises: 
performing a byte-wise substitution of at least one byte of a word of the secret 

key to generate a corresponding replacement word; and 

mixing at least two bytes of a replacement word to generate the first key byte. 

18. The method of claim 15, wherein performing the key dependent Sbox 
substitution further comprises: 

combining a second key byte with the substituted first combined byte to generate 
a second combined byte; and 

substituting the second combined byte with a byte value from the pre- 
determined array. 

19. The method of claim 12, wherein mixing at least two bytes of the primary 
intermediate values comprises: 

mixing at least two bytes using a minimum distance separable matrix 
multiplication. 

20. The method of claim 19, wherein the minimum distance separable matrix 
multiplication comprises operations over a Galois Field comprising 256 elements.. 

21. The method of claim 12, wherein applying the cryptographic function further 



compnses: 
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mixing at least two input values to generate the primary intermediate values. 

22. The method of claim 21, wherein mixing at least two input values comprises: 
mixing at least two input values based on modular arithmetic. 

23. The method of claim 22, wherein mixing at least two input values comprises: 
adding the input values to generate a mixed value, wherein the mixed value is a 

primary intermediate value corresponding to a first input value; and 

adding the mixed value with a second input value to generate a primary 
intermediate value corresponding to the second input value. 

24. The method of claim 12, wherein applying the cryptographic function further 
comprises: 

mixing at least two secondary intermediate values to generate the output values. 

25. The method of claim 24, wherein mixing at least two secondary intermediate 
values comprises: 

mixing at least two input secondary intermediate values based on modular 
arithmetic. 

26. The method of claim 25, wherein mixing at least two secondary intermediate 
values comprises: 

adding the secondary intermediate values to generate a mixed value, wherein the 
mixed value is an output value corresponding to a first secondary intermediate value; 
and 

adding the mixed value with a second secondary intermediate value to generate 
an output value corresponding to the second secondary intermediate value. 

27. Apparatus for generating a key stream comprising: 

means for applying a cryptographic function on input values selected from a first 
array of values to generate output values; 

means for selecting mask values from a second array of values; and 
means for combining the output values with the mask values to generate a key 
stream block for the key stream; 
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wherein the first and second arrays are finite. 

28. The apparatus of claim 27, further comprising: 

means for generating the second array from the first array. 

29. The apparatus of claim 27, further comprising: 

means for applying the cryptographic function on updated input values selected 
from an updated first array of values to generate updated output values; 

means for selecting updated mask values from an updated second array of 

values; and 

means for combining the updated output values with the updated mask values to 
generate a new key stream block for the key stream. 

30. The apparatus of claim 27, wherein the number of input values and the number 
of output values are equal. 

31. The apparatus of claim 27, wherein each value comprises of one or more words 
and wherein each word comprises two or more bytes. 

32. The apparatus of claim 31, wherein the means for applying the cryptographic 
function comprises: 

means for performing byte-wise substitution of at least one byte of an input 

value to generate primary intermediate values; and 

means for mixing at least two bytes of a primary intermediate value to generate a 

secondary intermediate value to generate the output values. 

33. The apparatus of claim 32, wherein the means for performing byte-wise 
substitution comprises: 

means for performing a key-dependent Sbox substitution on the at least one 

byte. 

34. The apparatus of claim 32, wherein the means for mixing at least two bytes of 
the primary intermediate values comprises: 
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means for mixing at least two bytes using a minimum distance separable matrix 
multiplication. 

35. The apparatus of claim 32, wherein the means for applying the cryptographic 
function further comprises: 

means for mixing at least two input values based on modular arithmetic to 
generate the primary intermediate values. 

36. The apparatus of claim 32, wherein the means for applying the cryptographic 
function further comprises: 

means for mixing at least two secondary intermediate values based on modular 
arithmetic to generate the output values. 

37. A machine readable medium used for generating a key stream comprising: 
code segment for applying a cryptographic function on input values selected 

from a first array of values to generate output values; 

code segment for selecting mask values from a second array of values; and 
code segment for combining the output values with the mask values to generate 
a key stream block for the key stream; 

wherein the first and second arrays are finite. 

38. The medium of claim 37, further comprising: 

code segment for generating the second array from the first array. 

39. The medium of claim 37, wherein each value comprises of one or more words 
and wherein each word comprises two or more bytes and wherein the code segment for 
applying the cryptographic function comprises: 

code segment for performing a byte-wise substitution of at least one byte of an 
input value to generate primary intermediate values; and 

code segment for mixing at least two bytes of a primary intermediate value to 
generate a secondary intermediate value to generate the output values. 

40. The medium of claim 39, wherein the code segment for performing the byte- 
wise substitution comprises: 
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code segment for performing a key-dependent Sbox substitution on the at least 
one byte. 



41. The medium of claim 39, wherein the code segment for mixing at least two 
bytes of the primary intermediate values comprises: 

code segment for mixing at least two bytes using a minimum distance separable 
matrix multiplication. 

42. The medium of claim 41, wherein the code segment for applying the 
cryptographic function further comprises: 

code segment for mixing at least two input values based on modular arithmetic 
to generate the primary intermediate values. 



43. The medium of claim 41, wherein the code segment for applying the 
cryptographic function further comprises: 

code segment for mixing at least two secondary intermediate values based on 
modular arithmetic to generate the output values. 



44. Apparatus for generating a key stream comprising: 

a linear feedback shift register (LFSR) configured to generate a first array of 

values, wherein the values of the first array corresponds to the values of the LFSR 
states; 

a nonlinear filter module configured to apply a cryptographic function on input 
values selected from the first array to generate output values; and 

a combining module configured to combine the output values with mask values 
selected from a second array of values to generate a key stream block for the key 
stream; 

wherein the first and second arrays are finite. 

45. The apparatus of claim 44, wherein the LFSR is configured to generate the 
second array from the first array. 

46. The apparatus of claim 44, wherein the number of input values and the number 
of output values are equal. 
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47. The apparatus of claim 44, wherein the first and second array each comprises 
seventeen values. 

48. The apparatus of claim 44, wherein each value comprises of one or more words 
and wherein each word comprises two or more bytes. 

49. The apparatus of claim 48, wherein the nonlinear filter module comprises: 

a byte substitution module configured to perform byte wise substitution of at 
least one byte of an input value to generate primary intermediate values; and 

a byte mixing module configured to mix at least two bytes of a primary 
intermediate value to generate a secondary intermediate value to generate the output 
values. 

50. The apparatus of claim 49, wherein the byte substitution module is configured to 
perform a key-dependent Sbox substitution on the at least one byte. 

51. The apparatus of claim 49, wherein the byte mixing module is configured to mix 
at least two bytes using a minimum distance separable matrix multiplication. 

52. The apparatus of claim 49, wherein the nonlinear filter further comprises: 

a word mixing module configured to mix at least two input values based on 
modular arithmetic to generate the primary intermediate values. 

53. The apparatus of claim 49, wherein the nonlinear filter further comprises: 

a word mixing module configured to mix at least two secondary intermediate 
values based on modular arithmetic to generate the output values. 




